Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: BScHqUGYrM+JRNdkrNygPlgAdWWlLdg/MN4LnqDwjwc=
Subject key identifier: 31:24:5E:18:1A:9E:81:87:47:C7:BA:2C:33:A5:FE:AA:DB:19:F7:E1
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 0197B6A0A21D9AF9749A38858909DF8C1E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 0505
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: NfD0bu6CTOHFOwKX83vXlWW-BFM.roa (hash: E6orvDZyM/U63REesg6yOGTM6Hs+Hh2EKGVP0jWzDOg=)
2: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: gtgj5QZmwmujh3TGvUk94UK7WScKBZKaiIz7xtkIvEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a2:1d:9a:f9:74:9a:38:85:89:09:df:8c:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=31245e181a9e818747c7ba2c33a5feaadb19f7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:ab:10:27:3d:3c:36:ae:9a:62:be:f6:48:
e3:d5:f5:03:f1:a2:49:9e:55:68:bb:48:f2:b5:03:
56:4c:17:58:17:2b:ed:25:48:cb:50:8a:a6:0a:d1:
85:a6:34:db:90:92:67:ee:c0:a5:40:3e:9b:c9:ae:
55:08:25:0e:98:9e:34:51:fb:33:36:4f:10:00:5b:
4d:70:f6:3c:54:22:c5:83:94:c4:f3:69:0b:3b:cf:
8e:08:41:e2:fc:c8:f0:b4:48:a4:34:fa:cf:8e:da:
12:b4:de:61:4c:f3:88:d9:ed:d3:8c:b3:f8:28:12:
0a:0f:bd:7b:5c:29:7e:1f:35:5c:a7:6e:94:a6:f2:
89:88:36:34:c5:1a:4b:dd:76:96:c1:d7:ec:d8:f5:
ca:90:19:71:a2:04:64:8c:29:2e:8b:3f:b0:11:a5:
7d:64:46:59:b1:cc:8b:8e:0e:aa:33:83:13:da:7e:
5e:45:af:fa:40:8e:59:61:f8:e1:3e:41:10:98:78:
79:37:ee:db:dc:8c:86:de:ac:42:78:5c:3a:0f:a6:
0e:6f:ad:d6:d8:b1:b7:53:c8:fc:a9:4e:90:a3:53:
2e:f3:b2:79:e8:4e:bf:c7:0b:a1:c2:7d:90:b5:d1:
93:74:43:ed:c1:b4:cf:64:cc:f8:7c:ab:dc:02:48:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:5E:18:1A:9E:81:87:47:C7:BA:2C:33:A5:FE:AA:DB:19:F7:E1
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d1:c5:0e:6d:ee:cf:97:8a:fa:79:da:58:c5:b1:59:95:72:
04:3f:4c:80:cf:51:9f:11:17:17:bd:33:79:2f:79:29:1d:eb:
69:8f:ae:38:ba:a5:89:a3:24:87:3d:fa:87:61:29:cb:33:3f:
47:a5:7b:f4:4c:30:f4:ac:d8:8b:fc:ad:ba:ff:2d:de:e7:41:
57:51:cf:93:d8:10:9a:28:65:fa:8f:a3:5b:07:e3:91:b8:24:
7a:90:29:07:c5:ad:23:ad:ea:14:f1:42:9f:12:7d:40:b8:6f:
16:c9:02:97:8e:84:8b:9a:f4:86:b7:58:02:73:cc:dc:8d:47:
30:13:fe:07:ce:ce:6c:a4:09:37:8a:2b:72:4e:cd:82:32:94:
ea:9a:bf:60:e8:57:f7:aa:25:61:0d:c6:fa:7c:3f:03:8d:cf:
0b:d7:33:af:60:05:76:61:5b:c9:4e:57:ed:f1:f2:4e:31:df:
45:2d:03:67:98:fe:50:c3:59:a6:09:90:78:a5:1c:a5:98:9e:
b9:77:43:a1:8a:8e:ce:c9:62:79:92:a2:89:b0:d5:06:73:57:
ff:d7:3b:b3:88:d6:ab:08:98:47:09:9b:d3:f4:06:37:fb:d6:
dc:31:c2:2a:60:4b:01:43:78:73:2c:09:71:a9:85:f1:8c:82:
1c:1e:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:27 2025 by rpki-client